WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product outlook✕
Overview 8 matches · 0 in Waratek scope · 0 protected · 6 CISA KEV · 4 public PoC · 5 EPSS ≥ 0.5
8matches 0in Waratek scope0.0% 0protected0.0% 6CISA KEV75.0% 4public PoC50.0% 5EPSS ≥ 0.562.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 8 100.0% Withdrawn CVE 0 0.0%
Critical 1 12.5% High 7 87.5% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 8 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 8 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 8 High: 7Critical: 1 not blocked: 8 Exploited: 8
20041 Not applicable1 High1 not blocked1 Exploited1 20050 20061 Not applicable1 High1 not blocked1 Exploited1 20071 Not applicable1 High1 not blocked1 Exploited1 20080 20090 20100 20110 20120 20130 20140 20151 Not applicable1 High1 not blocked1 Exploited1 20160 20171 Not applicable1 High1 not blocked1 Exploited1 20180 20190 20200 20210 20220 20232 Not applicable2 Critical1 High1 not blocked2 Exploited2 20240 20250 20261 Not applicable1 High1 not blocked1 Exploited1
200420062008201020122014201620182020202220242026
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-96951 High 2026-10-13 Not applicable Exploited Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2023-35311 High 2023-07-11 Not applicable Exploited Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-23397 Critical 2023-03-14 Not applicable Exploited Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2017-11774 High 2017-10-13 Not applicable Exploited Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
CVE-2015-1641 High 2015-04-14 Not applicable Exploited Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2007-0671 High 2007-02-03 Not applicable Exploited Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVE-2006-4868 High 2006-09-19 Not applicable Exploited Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
CVE-2004-0380 High 2004-05-04 Not applicable Exploited The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."